Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdckcKhhPSE1BaHfUP0Jzt1MtpQ.cer
File: hdckcKhhPSE1BaHfUP0Jzt1MtpQ.cer (raw, json)
Hash identifier: 3V/pi5JvvHdK6Hqo28lKL2Pnlv++U4vIjsp1wu7DIY8=
Subject key identifier: 85:D7:24:70:A8:61:3D:21:35:05:A1:DF:50:FD:09:CE:DD:4C:B6:94
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 011248
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9129DAC/8C5C009EB44C11E998120237C4F9AE02/hdckcKhhPSE1BaHfUP0Jzt1MtpQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9129DAC/8C5C009EB44C11E998120237C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 14 May 2021 00:50:44 +0000
Certificate not after: Sat 30 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 45.249.68.0/22
IP: 103.217.228.0/22
IP: 2400:3ac0::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70216 (0x11248)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 14 00:50:44 2021 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=A9129DAC/serialNumber=85D72470A8613D213505A1DF50FD09CEDD4CB694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e1:f6:a5:41:3c:71:fe:48:ca:44:ef:21:ff:
ad:22:5b:c4:27:dc:ce:85:be:ba:a5:46:76:2a:6d:
13:62:33:b6:42:b0:2a:89:ba:c7:62:1c:f8:62:2f:
d4:cc:99:1e:99:70:d0:00:cf:f4:9c:09:2b:f1:74:
4a:72:b1:34:66:2b:7f:03:83:4d:e0:db:7e:23:9a:
01:42:0c:52:33:d5:39:4d:85:85:34:69:73:f0:d8:
b9:af:61:2d:7f:ef:c5:10:0e:88:c0:db:f4:e8:48:
2f:33:23:95:f8:a7:2b:6b:44:c9:cf:3e:61:3a:51:
2a:c4:c2:e2:6c:cf:db:a0:9a:71:6f:3e:ce:87:87:
45:54:3f:45:d1:02:33:02:c0:f1:1f:8d:92:c2:5a:
93:e6:e5:a3:1a:27:0a:14:d4:61:d7:31:4c:ff:34:
b9:5a:b1:ef:2e:43:f8:6f:d4:98:af:5c:ff:9b:93:
1d:cc:ad:71:bf:88:e1:b0:41:39:34:85:7f:fd:b5:
56:06:a9:bf:09:c2:3a:77:ac:85:c4:8f:57:2b:d9:
43:09:94:dd:2a:f8:5f:0d:3e:08:4b:be:11:1b:f9:
f4:8b:5c:a2:6c:74:3c:34:20:0d:f1:c5:4c:b2:6e:
e5:55:69:db:5b:85:e0:a5:24:89:ef:0a:9e:8b:50:
1d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D7:24:70:A8:61:3D:21:35:05:A1:DF:50:FD:09:CE:DD:4C:B6:94
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9129DAC/8C5C009EB44C11E998120237C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9129DAC/8C5C009EB44C11E998120237C4F9AE02/hdckcKhhPSE1BaHfUP0Jzt1MtpQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.249.68.0/22
103.217.228.0/22
IPv6:
2400:3ac0::/32
Signature Algorithm: sha256WithRSAEncryption
11:5f:5a:4e:90:4a:b6:7b:18:e9:70:dd:65:f9:58:21:56:9b:
5e:63:d8:2d:84:ea:81:da:a6:1c:93:3f:2e:7e:79:6e:35:bd:
c8:9c:35:36:37:7b:58:68:96:e3:f6:9e:95:f5:0a:13:06:3e:
74:4a:47:7e:b2:fc:7e:d2:c8:39:f6:96:92:91:9e:9d:45:ad:
89:ce:2e:2c:62:c8:6e:a7:98:77:a9:83:ad:88:2b:41:dc:70:
f3:9c:eb:cb:f9:e0:e0:2c:50:6e:de:31:4d:10:e4:32:85:18:
f0:18:77:b0:9b:3b:ce:73:40:69:2a:b3:5b:5f:18:08:e2:df:
9f:13:d1:99:36:29:34:b5:92:44:24:da:ca:3f:17:6c:b3:5a:
d2:9c:04:a5:fe:37:06:1a:d1:80:a3:a0:3a:8f:a1:08:3c:d3:
86:8f:72:01:89:64:09:f2:76:d1:79:39:95:89:fa:9a:04:ab:
de:69:61:f4:94:e6:8e:4d:f1:8d:b0:43:47:37:20:b8:8e:04:
18:16:db:df:08:4f:74:7a:92:8b:38:9e:9a:a3:5b:1c:03:55:
81:3b:4c:15:7f:6d:42:8e:f8:d6:e6:e1:ea:a7:51:b2:f1:83:
ac:a4:01:c5:84:ef:2b:a2:b9:d9:d0:24:1a:ba:d3:4c:3d:93:
58:82:5c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:44 2024 by rpki-client on console-ams.rpki-client.org